$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: sqD29rHeCwZ9oR8kwuuTArRLLCMUUMEav7DweLrazvc= Subject key identifier: 15:AF:32:3B:C1:B4:8E:E7:34:83:86:F5:6B:05:7F:5A:C4:7F:4B:5F Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 01E7 Signing time: Sun 11 May 2025 01:37:35 +0000 Manifest this update: Sun 11 May 2025 01:37:35 +0000 Manifest next update: Sun 18 May 2025 01:37:35 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: IROX0flPmCzNwXnBMzDysXZiFYHgEsOwmfAR6oDyQR0=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: May 11 01:37:35 2025 GMT Not After : May 18 01:37:35 2025 GMT Subject: CN=681fff5f-0454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:82:9c:fb:39:a1:2a:81:19:9f:94:52:71:c6: 97:86:24:09:0d:1b:05:41:ce:8b:54:8b:4f:13:13: 47:ed:26:34:3f:53:5d:9d:51:79:05:f2:64:75:dc: 41:af:82:cf:97:45:2d:bf:3f:26:48:64:9a:79:f4: b3:b9:65:7d:23:a5:af:2b:35:ff:c0:c5:cc:d6:cc: 6c:17:81:57:48:76:c1:47:d0:fd:79:66:a9:32:b1: 2c:f7:44:1c:f8:2e:91:7e:73:82:66:d0:fb:dd:68: 75:7c:16:c8:70:ed:8a:97:df:7e:c3:0b:d1:c1:e4: 14:32:9a:10:56:12:a5:14:5e:35:e8:59:a6:79:2c: 5f:6e:44:1f:f6:4d:cd:b5:1e:82:9c:3e:f5:17:e1: b1:48:ef:f1:19:91:ad:a4:ef:72:ce:bc:e3:f5:a1: 8f:a8:2b:d8:b4:fe:39:f2:da:f8:93:2a:3f:1f:59: c7:5a:06:de:e9:4e:a5:a0:e7:f7:19:18:23:fb:86: 7b:73:ac:8b:a2:a6:21:4c:b5:ce:6c:48:2f:b8:eb: 08:f2:64:3e:29:70:97:e7:ef:8c:fa:cb:d1:e9:15: b7:eb:8c:9e:14:83:ef:d4:f4:bd:b9:cc:54:d2:cc: 71:79:be:05:e7:6c:27:be:1c:46:31:39:68:04:07: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AF:32:3B:C1:B4:8E:E7:34:83:86:F5:6B:05:7F:5A:C4:7F:4B:5F X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:94:79:02:01:56:ad:0e:10:4c:54:07:07:ca:ce:b9:c6:09: 14:5c:bc:c7:4c:75:14:a0:5b:6d:95:37:da:58:1d:6e:82:98: 4c:8c:33:0a:4a:27:98:1a:3e:b4:ab:35:e7:28:66:a7:82:2b: 8b:96:41:82:72:74:e0:83:ee:53:24:7e:07:c4:b0:3f:b8:6d: 12:c3:66:ef:1c:91:5d:bd:5c:8d:b4:18:5f:8a:d8:f6:cd:da: 2c:e3:89:1e:29:0c:ca:5d:b3:83:7b:97:22:bb:61:92:9f:48: 1c:7a:19:a4:50:9e:71:38:e6:9a:c5:e1:17:ff:b8:ce:4b:37: d5:bb:e7:4d:5e:b6:d1:f2:43:5f:ca:f4:ca:c3:37:e1:f0:ad: ac:4a:7d:4d:90:9d:90:e8:8a:13:96:39:1b:66:01:64:a8:76: 71:b1:df:32:bd:27:a2:fe:7b:f6:d0:2b:af:0a:2e:03:43:eb: cc:a0:34:79:f6:76:35:d2:63:5f:c0:3a:1c:f8:2e:d9:f1:36: 89:39:d1:61:0d:af:51:9a:65:f0:b7:d5:c0:51:fd:d5:25:c4: 9a:41:a8:c4:7d:49:88:2c:eb:e2:da:aa:44:c0:1f:84:71:ab: 8f:3a:e8:19:85:86:3f:8f:83:cc:3d:1c:fe:2d:f2:e7:76:b1: c1:76:4d:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwNTExMDEzNzM1WhcNMjUwNTE4MDEzNzM1WjAYMRYwFAYD VQQDEw02ODFmZmY1Zi0wNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oKc+zmhKoEZn5RSccaXhiQJDRsFQc6LVItPExNH7SY0P1NdnVF5BfJkddxB r4LPl0Utvz8mSGSaefSzuWV9I6WvKzX/wMXM1sxsF4FXSHbBR9D9eWapMrEs90Qc +C6RfnOCZtD73Wh1fBbIcO2Kl99+wwvRweQUMpoQVhKlFF416FmmeSxfbkQf9k3N tR6CnD71F+GxSO/xGZGtpO9yzrzj9aGPqCvYtP458tr4kyo/H1nHWgbe6U6loOf3 GRgj+4Z7c6yLoqYhTLXObEgvuOsI8mQ+KXCX5++M+svR6RW364yeFIPv1PS9ucxU 0sxxeb4F52wnvhxGMTloBAe0HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWvMjvB tI7nNIOG9WsFf1rEf0tfMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFlHkCAVatDhBMVAcHys65xgkUXLzHTHUUoFttlTfaWB1ugphMjDMK SieYGj60qzXnKGangiuLlkGCcnTgg+5TJH4HxLA/uG0Sw2bvHJFdvVyNtBhfitj2 zdos44keKQzKXbODe5ciu2GSn0gcehmkUJ5xOOaaxeEX/7jOSzfVu+dNXrbR8kNf yvTKwzfh8K2sSn1NkJ2Q6IoTljkbZgFkqHZxsd8yvSei/nv20CuvCi4DQ+vMoDR5 9nY10mNfwDoc+C7Z8TaJOdFhDa9RmmXwt9XAUf3VJcSaQajEfUmILOvi2qpEwB+E cauPOugZhYY/j4PMPRz+LfLndrHBdk0J -----END CERTIFICATE-----Generated at Mon May 12 13:30:42 2025 by rpki-client